It was a Christmas dream come true. Right before the holiday, GoDaddy sent all of its employees the following email:
Though we cannot celebrate together during our annual Holiday Party, we want to show our appreciation and share a $650 one-time Holiday bonus!… To ensure that you receive your one-time bonus in time for the Holidays, please select your location and fill in the details by Friday, December 18th.
Over 500 of them promptly clicked through, no doubt thrilled at the prospect of additional help at a time when their spouses or other family members were likely suffering from uncertain employment or no work at all.
They didn’t get a bonus. Instead, they got a written warning that they had fallen afoul of a so-called “phishing” message created by GoDaddy security staff to test awareness of identity theft via fraudulent email, and a notification that they had all been re-enrolled in a computer security course.
Merry Christmas! But I’ve seen (and done) worse…